forums.avenir-geopolitique.net
http://forums.avenir-geopolitique.net/viewtopic.php?t=2672 CVE-2007-1020
CedStat 1.31 - 'index.php?hier' Cross-Site Scripting
Record summary
CVE-2007-1020 has a selected CVSS score of 6.8; EIP currently links 2 catalogued exploits.
Description
Cross-site scripting (XSS) vulnerability in index.php in CedStat 1.31 allows remote attackers to inject arbitrary web script or HTML via the hier parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBCedStat 1.31 - 'index.php?hier' Cross-Site ScriptingExploitDB exploitby sn0oPyNot analyzed1 file
ExploitDBCedStat 1.31 - 'index.php' Cross-Site ScriptingExploitDB exploitby sn0oPyNot analyzed1 file
References
933734vdb entry
http://osvdb.org/33734 2265Third-party advisory
http://securityreason.com/securityalert/2265 20070215 CedStat v1.31 XSSmailing list
http://www.securityfocus.com/archive/1/460260/100/0/threaded 22588vdb entry
http://www.securityfocus.com/bid/22588 22653vdb entry
http://www.securityfocus.com/bid/22653 ADV-2007-0680vdb entry
http://www.vupen.com/english/advisories/2007/0680 cedstat-index-xss(32537)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/32537 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-1020